SecretBridge 0.3.1

SecretBridge 0.3.1

公开预发布 · Public prerelease | 面向个人本机使用与评估，安装包未签名。**使用独立的空白数据目录，不要直接覆盖旧版安装。**保留原安装和独立备份，先使用测试凭据验证。
For individual, single-machine use and evaluation. Packages are unsigned. Use a separate, empty data directory; do not overwrite an earlier installation. Preserve the existing installation and an independent backup; validate with disposable test credentials first.

版本概览 / Release at a glance

项目 / Item	内容 / Value
发布 / Published	2026-10-10 · v0.3.1
源码 / Source	a82cd1296722
变更范围 / Change range	与 v0.3.0-beta.5 比较 / Compare with v0.3.0-beta.5
配置 schema / Configuration schema	25（未变 / unchanged）
配置导出格式 / Configuration export format	2（未变 / unchanged）
发行验证 / Package evidence	三平台原生包与客户端附件 / Native packages and client downloads

概览 / Summary. 本版集中更新锁定依赖、修复验收脚本对重组后模块的匹配，并强化长期使用测试的结果校验。软件、Web 管理端与五类客户端附件统一使用 0.3.1；数字版本号不改变本次预发布状态，也不新增旧版兼容承诺。
This maintenance release updates locked dependencies, repairs acceptance filters after the module reorganization and strengthens long-running test evidence. The broker, Web application and five client downloads share version 0.3.1. The numeric version does not change the prerelease classification or add earlier-version compatibility guarantees.

安装前必读 / Before you install

• 保留原安装 / Preserve the existing installation: schema 25、配置格式 2 未变，但不要因此推定可直接覆盖旧版。使用独立的空白数据目录，保留旧安装及备份。回退程序不等于回退数据库。 / Unchanged schema and export formats are not an in-place upgrade guarantee. Use a separate empty data directory and retain the existing installation and backup. Binary rollback is not database rollback.
• 首次设置由用户完成 / Human first-run setup: 用户本人确认协议、设置 PIN 并保存恢复密钥。不要向 AI 提供 PIN、恢复密钥、绑定二维码或真实凭据。 / Accept the agreement, set the PIN and retain the recovery key locally. Do not give an AI the PIN, recovery key, enrollment QR code or real credentials.
• 优先使用发行包 / Prefer release packages: 从 AI 辅助部署或安装与服务管理开始。已有匹配代理时，按客户端集成下载选择附件。客户端附件本身不安装代理。 / Start with the AI-assisted or manual deployment guide. Client downloads require the matching local broker; they do not install it.

更新详情 / Detailed changes

依赖安全与维护 / Dependency security and maintenance

• 集中评审并整合 UUID、SFTP、MCP SDK、本机通知、Node.js 类型、图标、Vite、Vitest、source-map-js 和 CI 缓存 Action 的十组更新，保留精确锁文件并更新第三方许可与来源材料。 / Ten dependency updates were reviewed and integrated together, retaining exact locks and refreshing third-party license and provenance materials.
• 将 source-map-js 更新至 1.2.2，修复 GHSA-68fv-2mgg-jv7q。漏洞门槛检查 Rust 锁定依赖及 Web 生产依赖，结果不等同于完整安全审计。 / Upgrade source-map-js to 1.2.2 for the linked advisory. The vulnerability gate covers locked Rust and production Web dependencies; it is not a complete security audit.
• 继续使用固定 Node.js 24 工具链，不要求用户升级到 Node.js 26；预构建软件包与客户端附件无需用户编译。 / Keep the pinned Node.js 24 toolchain. Prebuilt software and client downloads do not require user compilation or Node.js 26.

更可信的实测门槛 / More reliable acceptance evidence

• 修复模块拆分后过时的 Rust 测试筛选路径。先读取已编译测试清单，核对预期测试，再执行；筛选为空或数量不符会失败，不能把“运行零项测试”记为通过。 / Repair stale Rust acceptance filters. Validate the compiled test inventory before execution; missing or incorrectly counted tests fail instead of reporting zero-test success.
• 两个连续进程复用同一临时数据库，必须证实累计 4,000 次审批及运行与各项清理指标，避免仅凭进程退出码宣称长期使用测试通过。 / Two processes reuse one disposable database and must prove 4,000 approvals and runs, together with the required cleanup metrics.
• 统一所有权标记的字节格式，修复 Windows 换行转换导致的验收启动失败；子进程复用当前 Python，报告中的命令去除个人解释器路径。 / Normalize ownership-marker bytes to avoid Windows newline failures. Child processes retain the current Python interpreter and reports avoid personal interpreter paths.

关联记录 / Traceability

范围 / Scope	合并的 PR / Merged PR	对应任务 / Related work
验收脚本与结果校验 / Acceptance reliability	#189	#180
十组依赖集中整合 / Consolidated dependencies	#191	#179、#181–#188、#190 已整合 / Integrated
版本与发行材料 / Version alignment	#192	软件与附件统一为 0.3.1 / Matching broker and client versions

下载与验证 / Downloads and verification

软件包 / Native software packages

平台 / Platform	发行包 / Archive	校验文件 / SHA-256
Windows x86_64	ZIP	SHA-256
Ubuntu/Linux x86_64	tar.gz	SHA-256
macOS arm64	tar.gz	SHA-256

客户端插件与 Skill / Client plugins and Skills

客户端 / Client	附件 / Download	校验文件 / SHA-256
Codex 插件 / Codex plugin	ZIP	SHA-256
WorkBuddy 连接器 / WorkBuddy connector	ZIP	SHA-256
WorkBuddy Skill	ZIP	SHA-256
DeepSeek Harness bundle	TGZ	SHA-256
通用操作 Skill / Generic operations Skill	ZIP	SHA-256

完整 SHA-256 / Full archive digests

3041295666e3f2dda73aa23324cd6673a90432c0d2bead666ae4c320d0dd90f6  secretbridge-0.3.1-codex-plugin.zip
b1eb7801cd5a849e3be180b54f6ab25f1716e666a4c0fd05374dd4e188fcaed3  secretbridge-0.3.1-deepseek-harness.tgz
e5b46d69245e243c5e5737a12b646af14bceb9f6ca060f470b70078a7d88f2d0  secretbridge-0.3.1-linux-x86_64.tar.gz
08761e67343b31e818fe9e12f52228eb80a8b5a6504f7e67c66b744b7e524b2c  secretbridge-0.3.1-macos-aarch64.tar.gz
dc10414d76bfc5553378ce2bffd0e7a71258daf3b9ae1923380afa774e8496ba  secretbridge-0.3.1-operations-skill.zip
a6194d1f342d889b64b89592cfc378cfde9d1014cf028eaf11d728da07569f84  secretbridge-0.3.1-windows-x86_64.zip
1dc93529070a43f92b71c312ce090fc37234fc282829ed67545132288e2dd710  secretbridge-0.3.1-workbuddy-connector.zip
e3a5642804c29bdedbdb030bb58aa42867569ab886511f9bbca27cbf5e621c96  secretbridge-0.3.1-workbuddy-skill.zip

先核对同名 .sha256。原生包内包含 CycloneDX 1.6 SBOM、清单、对应源码及许可；解压后运行 verify-package。客户端附件中的 INTEGRATION.json 记录版本、不可变源码和逐文件摘要，安装要求见 INSTALL.md。摘要验证完整性，不替代发行者签名。
Check the matching .sha256 first. Native archives contain the manifest, CycloneDX 1.6 SBOM, corresponding source and licenses; run verify-package after extraction. Client INTEGRATION.json records the version, immutable source and file digests; consult INSTALL.md. Checksums verify integrity, not publisher identity.

验证边界与反馈 / Validation limits and feedback

• 仓库与安装包检查 / Repository and package checks：三平台回归、两组 PostgreSQL/MySQL 矩阵、原生凭据库的临时条目测试、隔离安装生命周期、依赖门槛与客户端归档验证。 / Three-platform regression, two PostgreSQL/MySQL matrices, disposable native credential-store tests, isolated package lifecycle and dependency/client-download gates.
• 浏览器验收 / Browser acceptance：Chromium、Firefox、WebKit、实际布局、审批按钮可见性与自动化无障碍检查。 / Three browser engines, actual layout/approval visibility and automated accessibility checks.
• CodeQL：Rust、JavaScript/TypeScript、Python、Actions。 / Four-language scanning.
• 本机补充检查：81 项 Python、122 项前端测试、Rust 工作区、类型、格式、Clippy、许可和漏洞门槛通过。编译后的验收清单核对为 11 项数据库测试、1 项数据库 MCP 闭环、1 项并发测试与 1 项历史测试。 / Additional local regression and compiled acceptance inventory validation passed.
• 同一提交的本机 Windows release 程序完成 5 轮性能测量：启动 p95 517.78 ms、状态请求 p95 15.95 ms、空闲内存上限 12.85 MiB，全部低于现有门槛；这些数值不是用户硬件承诺。 / A local Windows release build from the same commit passed five rounds: startup p95 517.78 ms, status p95 15.95 ms and peak idle RSS 12.85 MiB. These measurements are not hardware performance guarantees.
• Windows ...

SecretBridge 0.3.0-beta.5

SecretBridge 0.3.0-beta.5

公开 Beta · Public prerelease | 面向个人本机评估，安装包未签名。**请使用全新数据目录，不要覆盖旧版安装或混用旧配置。**保留旧安装和独立备份，使用测试凭据。
For individual, single-machine evaluation. Packages are unsigned. Use a new, empty data directory; do not overwrite an earlier installation or mix configuration versions. Preserve the previous installation and an independent backup; use disposable test credentials.

版本概览 / Release at a glance

项目 / Item	内容 / Value
发布 / Published	2026-09-29 · v0.3.0-beta.5
源码 / Source	da8121e04af5
变更范围 / Change range	与 v0.3.0-beta.4 比较 / Compare with v0.3.0-beta.4
配置 schema / Configuration schema	25（未变 / unchanged）
配置导出格式 / Configuration export format	2（未变 / unchanged）
发行验证 / Package evidence	三平台原生包与客户端附件 / Native packages and client downloads

概览 / Summary. 本版改善 SSH 主机指纹的配置流程，加入 WorkBuddy 专用连接器与 Skill、DeepSeek Harness 原生插件，并首次随软件 Release 提供五类客户端独立下载附件。无需为了取得插件重新下载完整软件包，也无需在本机编译插件。
This release improves SSH host-key onboarding, adds dedicated WorkBuddy and native DeepSeek Harness integrations, and introduces five separately downloadable client archives alongside the native software packages. Obtaining client assets no longer requires downloading the complete broker package or compiling a plugin locally.

安装前必读 / Before you install

• 保留原安装 / Preserve the existing installation: 配置 schema 25、导出格式 2 与上一版相同，但本次不新增旧版兼容承诺。按当前 Beta 文档使用独立的空白数据目录，保留原安装和备份；客户端附件不包含本机代理，不能代替软件安装。 / Schema 25 and export format 2 are unchanged. This release adds no earlier-version compatibility guarantee. Follow the current Beta fresh-data evaluation instructions and preserve the previous installation and backup. Client downloads do not contain or install the broker.
• 首次设置由用户完成 / Human first-run setup: 用户本人确认协议、设置 PIN 并保存一次性恢复密钥；不要向 AI 提供 PIN、恢复密钥、配对链接或真实凭据。 / The user accepts the agreement, sets the PIN and saves the recovery key locally. Do not give these secrets, pairing links or real credentials to an AI.
• 从适合你的方式开始 / Choose a setup path: 优先使用 AI 辅助部署提示词，或按安装与服务管理操作。已有匹配版本的代理时，见客户端集成下载选择附件。 / Start with the AI-assisted deployment prompt or manual installation guide; use the client-download guide when the matching broker is already installed.

更新详情 / Detailed changes

SSH 主机指纹配置 / SSH host-key onboarding

• 可从保存的 SSH 资源探测服务器公开指纹，不读取凭据、不登录、不执行远程命令。必须通过独立可信渠道核对，再显式确认填入草稿；正常保存才会应用。探测结果不是服务器身份背书，也不会自动信任。
  Observe a saved SSH resource's public fingerprint without reading credentials, authenticating or running commands. Verify it through an independent trusted channel, explicitly fill the draft, then save normally. Observation does not authenticate the server or automatically trust the key.
• 地址或资源版本变化会使旧结果失效；可取消检查，并对已保存指纹变化给出警告。确认、取消和保存操作支持窄屏布局及清晰的禁用状态。
  Endpoint or resource-version changes invalidate stale results. Checks can be cancelled and changed saved fingerprints are highlighted. Confirmation, cancellation and save controls remain readable in narrow layouts.

WorkBuddy 与 DeepSeek Harness / Native client integrations

• WorkBuddy 新增专用连接器和 Skill，使用标准本机 stdio MCP；连接器支持声明为 WorkBuddy 4.24.0 及以上。Skill 指导工具使用、语言匹配和审批交接，但不代替 MCP 连接、不授予执行权限。
  WorkBuddy gains a dedicated connector and Skill using local stdio MCP, with compatibility declared for WorkBuddy 4.24.0 and later. The Skill guides tool use, language selection and approval handoff; it does not connect MCP or grant execution permission.
• DeepSeek Harness 使用原生 bundle、Cordis patch 和预构建 JavaScript，复用官方 MCP client，提供专用操作指引；宿主兼容范围为 >=0.2.0-rc.1 <0.3.0-0。没有安装期编译或另一份宿主运行时。
  DeepSeek Harness uses a native bundle, Cordis patch and prebuilt JavaScript with the official MCP client and scoped operation guidance. Host compatibility is >=0.2.0-rc.1 <0.3.0-0, without install-time compilation or a bundled duplicate runtime.
• 本机导出使用稳定的活动版本启动入口，拒绝覆盖已有目录；升级或回退后不必重建客户端文件。
  Personalized exports use the stable installed launcher and refuse to overwrite existing directories. Broker version activation does not require rebuilding the exported client integration.

五类独立下载 / Five standalone client downloads

• 与三平台软件包一起提供 Codex 插件、WorkBuddy 连接器、WorkBuddy Skill、DeepSeek Harness bundle 和通用操作 Skill。完整软件包仍包含这些文件；不是另设发行渠道，也没有向插件市场或 npm 注册表上架。
  Codex, WorkBuddy connector, WorkBuddy Skill, DeepSeek Harness and generic operations Skill archives accompany the native packages. Full software packages retain the same integrations. This is not a separate release channel, marketplace listing or npm registry publication.
• 每个附件附带 SHA-256、许可及版权、不可变源码引用和文件摘要清单，版本与代理一致。WorkBuddy Skill 的 SKILL.md 位于 ZIP 根目录；Harness 使用可直接安装的 npm-layout .tgz。
  Each archive includes a checksum, license, copyright, immutable source reference and file inventory, with its version matched to the broker. WorkBuddy's standalone Skill places SKILL.md at the ZIP root; Harness uses an installable npm-layout .tgz.
• 可移植模板使用 secretbridge --mcp-stdio。安装代理不等于已加入客户端的 PATH；自定义路径或数据目录应先用已安装程序导出个性化配置。包中不带个人路径、PIN 或凭据。
  Portable templates use secretbridge --mcp-stdio. Installing the broker does not imply adding it to the client's PATH. Export personalized configuration for custom paths or data directories. Downloads contain no user-specific paths, PINs or credentials.

审批反馈与依赖 / Approval feedback and dependencies

• 修复后台刷新清空新输入的审批备注的问题，备注绑定当前请求和版本，切换请求不会携带另一条请求的反馈。
  Approval-note drafts are scoped to the current request and version, preventing background refresh from clearing new feedback or carrying it into another request.
• 统一验证七组依赖更新：rand 0.10.3、rmcp/rmcp-macros 3.4.1、prettier 3.9.9、@types/node 24.19.0、vite 8.3.1、vitest 5.0.2 和 lucide-react 1.48.0；保持精确锁定与适用第三方许可材料。
  Seven dependency updates were integrated and validated together, retaining exact locks and applicable third-party notices.

关联记录 / Traceability

范围 / Scope	合并的 PR / Merged PR	对应任务 / Related work
SSH 指纹、客户端适配与审批反馈 / SSH onboarding, integrations and feedback	#176	#167、#175
依赖集中整合 / Consolidated dependencies	#177	#168–#174 已整合关闭 / Integrated and closed
Beta 版本、独立附件与发行检查 / Beta version, downloads and packaging checks	#178	五类附件及持续打包验证 / Five downloads and repeatable packaging

完整代码差异 / Full code diff: v0.3.0-beta.4...v0.3.0-beta.5.

下载与验证 / Downloads and verification

软件包 / Native software packages

平台 / Platform	发行包 / Archive	校验文件 / SHA-256
Windows x86_64	ZIP	SHA-256
Ubuntu/Linux x86_64	tar.gz	SHA-256
macOS arm64	tar.gz	SHA-256

客户端插件与 Skill / Client plugins and Skills

客户端 / Client	附件 / Download	校验文件 / SHA-256
Codex 插件 / Codex plugin	ZIP	SHA-256
WorkBuddy 连接器 / WorkBuddy connector	ZIP	SHA-256
WorkBuddy Skill	ZIP	SHA-256
DeepSeek Harness bundle	TGZ	SHA-256
通用操作 Skill / Generic operations Skill	ZIP	SHA-256

完整 SHA-256 / Full archive digests

bde808717c13dfe84a19f05dd9ef6f75305e28ed432a72...

SecretBridge 0.3.0-beta.4

SecretBridge 0.3.0-beta.4

公开 Beta · Public prerelease | 面向个人本机评估，安装包未签名。**本版本要求全新数据目录，不能覆盖旧版安装、复用旧数据库或导入旧配置包。**请保留旧安装和独立备份，测试使用测试凭据。
For individual, single-machine evaluation. Packages are unsigned. Use a new, empty data directory: earlier databases and configuration bundles are not supported. Preserve the previous installation and an independent backup; test with disposable test credentials.

版本概览 / Release at a glance

项目 / Item	内容 / Value
发布 / Published	2026-09-28 · v0.3.0-beta.4
源码 / Source	ce52f469d016
变更范围 / Change range	与 v0.3.0-beta.2 比较 / Compare with v0.3.0-beta.2
配置 schema / Configuration schema	25
配置导出格式 / Configuration export format	2
发行验证 / Package evidence	三平台原生发行流水线 / Native packaging

概览 / Summary. 本版围绕资源配置、审批、PIN 登录与历史查阅重新组织个人工作台，并加入常见 HTTP API 认证。密码仍只写入本机操作系统凭据库，AI 只能使用已授权操作和过滤后的结果。
This release reorganizes the personal workbench around resources, approvals, PIN sign-in and retained history, and adds common HTTP API authentication. Secrets remain write-only in the local OS credential store; AI clients receive authorized operations and filtered results, not secret values.

安装前必读 / Before you install

• 不支持就地升级 / No in-place upgrade: 数据库 schema 为 25，配置导出格式为 2；不接受旧数据库或旧配置包。保留原安装与独立备份，使用新的空白数据目录评估。不要将程序回退当作数据库恢复。 / Schema 25 and configuration format 2 do not accept earlier databases or bundles. Preserve the previous installation and an independent backup, then evaluate in a new empty data directory. A binary rollback is not a database restore.
• 首次设置由用户完成 / Human first-run setup: 用户通过本机一次性配对链接进入管理页，同意协议、设置 PIN 并安全保存一次性恢复密钥。不要将 PIN、恢复密钥或配对链接交给 AI。 / The user opens the local one-time pairing link, accepts the agreement, sets the PIN and safely stores the one-time recovery key. Do not give these secrets to an AI.
• 从适合你的方式开始 / Choose a setup path: 优先使用 AI 辅助部署提示词，或按安装与服务管理操作。发行包内已包含程序、Web 资源和客户端集成文件，安装插件无需现场构建。 / Start with the AI-assisted deployment prompt or manual installation guide. Packages contain the executable, Web assets and client integration files; plugin installation does not require on-site compilation.

更新详情 / Detailed changes

统一资源与填写体验 / Unified resources and normal form flow

• 连接与凭据融合成一条资源记录，不再重复填写地址和账号。环境与用途标签帮助区分资源；名称、地址与连接参数、账号及认证、用途说明按正常顺序填写。只有名称为保存时的必填项；不完整配置可先保存，但连接测试和执行前必须补齐必要参数。
  Connection and authentication now form one resource rather than separate catalog records. The form follows a normal configuration sequence; environment and purpose labels aid organization. Only the name is required to save. Incomplete metadata is never guessed during connection checks or execution.
• 新建资源时可直接填写秘密值，也可随后配置。地址与秘密等长字段使用合理宽度；侧栏底部固定保存和取消操作。秘密写入失败后同步最新记录版本，重试不重复创建资源。
  Enter authentication during creation or later. Longer fields use appropriate width, with persistent save/cancel controls. Failed secret writes reconcile the record version before retry instead of creating duplicate records.
• PostgreSQL/MySQL 的 TLS 可选，默认继续验证证书与主机名，不会自动降级。SSH 检查使用已核验主机指纹；HTTP 检查仅发送 HEAD，不自动改成其他请求。
  Database TLS is selectable, with certificate and hostname verification enabled by default and no automatic downgrade. SSH checks require a verified host fingerprint; HTTP checks use HEAD without automatically sending alternative requests.

HTTP API 与任务快照 / HTTP APIs and task snapshots

• 支持无认证、Bearer、Basic 和自定义 API Key 请求头；常见请求方法与嵌套 JSON 字段可在任务中配置。资源的配置预填到任务快照，修改资源不会悄悄改变既有审批。
  Configure unauthenticated, Bearer, Basic or custom API Key headers, common request methods and nested JSON fields. Resource metadata pre-fills a reviewable task snapshot; later resource changes do not silently rewrite an approval.
• 有凭据的 HTTP 资源使用 HTTPS；返回字段与大小仍受限，Basic 的实际编码认证值也参与输出过滤。
  Credential-bearing HTTP resources require HTTPS. Response fields and size remain bounded, and the actual encoded Basic authentication payload is included in output filtering.

审批与会话 / Approvals and AI conversations

• 审批弹窗居中，内容可滚动，决定按钮保持可见。批准按钮旁的下拉选择设置逐项确认、同一操作一次或当前会话限时授权；策略和批准在同一事务中提交。
  Centered review dialogs keep the decision footer visible. The approve control includes a policy dropdown, with policy and decision committed atomically.
• 拒绝时可留下反馈，要求 AI 更换方式或补充信息；反馈不授予权限，也不是重试原请求的许可。会话全操作授权仍要求显式风险确认并可撤销。
  Optional rejection feedback can ask the AI to change approach or provide information. Feedback does not grant permission or authorize an unchanged retry. Broad conversation grants still require explicit risk acknowledgement and remain revocable.
• MCP 目录提供管理页语言，操作 Skill 指导 AI 先识别语言，再用对应语言填写描述性文本。界面和客户端集成统一使用 SecretBridge 名称。
  The MCP catalog reports the management-page language, and the operations Skill guides language-matched descriptions. Interfaces and client integrations consistently use SecretBridge.

PIN 与历史 / PIN and retained history

• 身份验证设置、恢复密钥更新、敏感诊断预览和导出改为先选择操作，再通过 PIN 弹窗验证。恢复密钥入口仅在 PIN 失败后出现；管理页会话到期自动进入 PIN 登录，后台标签回到前台时也会核对，不必刷新。
  Authentication settings, recovery-key rotation and sensitive diagnostic preview/export now request PIN verification after an action is chosen. Recovery entry appears only after a failed PIN attempt. Expired sessions automatically show sign-in, including on return from a background tab.
• 终端历史保留时间、受控命令、普通参数、结果和脱敏输出，关闭会话或重启后仍可分页查阅和导出。交互键盘输入不被描述成 Shell 的精确命令审计；只有受控运行有可靠的退出状态。
  Retained history includes timestamps, controlled command data, parameters, results and filtered output across terminal closure and broker restart. Interactive keystrokes are not presented as an exact shell audit; reliable exit status belongs to controlled runs.
• Windows 受控终端用短调用启动私有脚本，减少 PowerShell 重绘回显。正式包包含插件所需文件；导出 Codex 插件及客户端配置不需要现场编译。
  Short private-script invocations reduce Windows PowerShell redraw noise. Native packages include plugin files; exporting the Codex plugin or client configuration does not require compilation.

客户端接入与品牌 / Client integration and branding

• 保留 Codex、Claude Code、Cursor、GitHub Copilot CLI、OpenCode、WorkBuddy 与 DeepSeek Harness 的专用配置，并加入其他本机 stdio MCP 客户端可用的通用配置。原生包包含预组装 Codex 插件，使用稳定的活动版本启动入口。 / Seven client-specific formats are retained alongside a generic local stdio MCP configuration. Native packages include a preassembled Codex plugin with a stable active-release launcher.
• 统一桥与钥匙孔 Logo，应用于管理页、favicon、文档与发行包；产品界面和接入配置使用 SecretBridge，中文名称仅保留在文档介绍中。 / The canonical bridge/keyhole logo is used across the console, favicon, documentation and packages. Interfaces and integration configuration use SecretBridge; the Chinese name remains in documentation introductions.
• 浏览器回归在调整窗口大小后等待实际布局就绪，再严格检查居中和按钮可见性；重复高低窗口切换以覆盖这条主分支失败路径。 / Browser acceptance waits for actual layout readiness after resizing, keeps strict centering and button-visibility assertions, and repeats short/tall transitions.
• 面向读者的界面、文档和反馈模板统一使用“测试数据”“测试凭据”，明确不使用真实业务信息或已有业务凭据。 / Reader-facing copy consistently uses “test data” and “disposable test credentials,” excluding real business information and existing business credentials.

关联记录 / Traceability

范围 / Scope	合并的 PR / Merged PR	对应任务 / Related work
品牌与通用客户端配置 / Branding and generic client configuration	#142	通用 MCP 配置、统一 Logo 与品牌素材 / Generic configuration and canonical brand assets
实机体验与部署效率 / Real-world usability and deployment	#153	#143–#152 实测整改 / Field-test improvements
资源、HTTP API、终端历史、审批与 PIN / Resources, HTTP APIs, history, approvals and PIN	#164	#154、#155、#156、#157、#158、#159、#161、#162
浏览器缩放回归与发行修正 / Resize acceptance and release correction	#166	#165

完整代码差异 / Full code diff: v0.3.0-beta.2...v0.3.0-beta.4.

下载与验证 / Downloads and verification

平台 / Platform	发行包 / Archive	校验文件 / SHA-256
Windows x86_64	ZIP	SHA-256
Ubuntu/Linux x86_64	tar.gz	SHA-256
macOS arm64	tar.gz	SHA-256

完整 SHA-256 / Full archive digests

c333d...

SecretBridge 0.3.0-beta.2

SecretBridge 0.3.0-beta.2

公开 Beta · Public prerelease | 面向个人本机评估，安装包未签名。**这是全新安装系列，不能覆盖旧版安装或复用旧版数据库。**请使用独立的空白数据目录和测试凭据，并保留旧版数据的独立备份。
For individual, single-machine evaluation. Packages are unsigned. This is a new installation line: do not install over an earlier version or reuse its database. Use a separate, empty data directory and disposable test credentials; keep an independent backup of existing data.

版本概览 / Release at a glance

项目 / Item	内容 / Value
发布 / Published	2026-09-25 · v0.3.0-beta.2
源码 / Source	469c295
变更范围 / Change range	与 v0.2.0-beta.9 比较 / Compare with v0.2.0-beta.9
配置 schema / Configuration schema	24
发行验证 / Package evidence	三平台原生包工作流 / Native packages CI

概览 / Summary. 本版重整项目结构与首次使用流程：设置 6–64 字符本机 PIN，保存仅显示一次的恢复密钥；将 AI 辅助部署放到文档入口，并随包提供可选的 AI 操作 Skill。Windows 权限检查的两条 Code Scanning 告警已修复。
This release reorganizes the project and first-run flow: set a 6–64 character local PIN, save a recovery key shown only once, start from AI-assisted deployment guidance, and optionally install the bundled AI operations Skill. Two Windows permission-check Code Scanning findings are fixed.

安装前必读 / Before you install

• 不支持就地升级 / No in-place upgrade: 本版不兼容旧安装布局、二进制或数据库。不要用 install 将本包覆盖到旧版目录，也不要用旧版数据库尝试启动；二进制回退不能代替数据库恢复。需要评估时，使用独立空目录并保留原安装。 / Earlier installation layouts, binaries and databases are not supported as upgrade inputs. Do not overwrite an old installation or start this binary against its database. A binary rollback is not a database restore; evaluate in a separate empty directory.
• 首次设置由用户完成 / Human first-run setup: 本机管理页先通过一次性配对链接，再由用户同意协议、设置 PIN、妥善保存恢复密钥。AI 不应读取、记录或转发配对链接、PIN 或恢复密钥。 / The local page first uses a one-time pairing link. The user then accepts the agreement, sets the PIN and stores the recovery key securely. An AI assistant must not read, retain or relay any of these secrets.
• 从适合你的方式开始 / Choose a setup path: 推荐先阅读 AI 辅助部署中的可复制提示词；手动安装见安装与服务管理。 / Start with the copyable AI-assisted deployment prompt, or follow the manual installation guide.

更新详情 / Detailed changes

本机身份保护 / Local identity protection

• 首次初始化必须设置 6–64 字符 PIN／口令。连续输入错误会触发持久化、指数增长的等待时间；等待从 30 秒开始，最长一小时。 / First-run setup requires a 6–64 character PIN/passphrase. Repeated failures cause persistent, exponentially increasing waits, starting at 30 seconds and capped at one hour.
• 首次设置时生成仅显示一次的恢复密钥。正确恢复密钥可以重置遗忘的 PIN，使用后密钥轮换；设置页面要求用户确认已安全保存。 / A recovery key is shown only once. It can reset a forgotten PIN and rotates after use; setup asks the user to confirm safe storage.
• 配对前不能进入 PIN 初始化。许可协议与 PIN 设置位于同一引导窗口，输入提示不再改变窗口尺寸。 / PIN enrollment requires a paired local session. The agreement and PIN setup share one onboarding dialog, whose validation messages no longer resize it.

AI 接入与项目结构 / AI integration and project structure

• README 与文档中心优先引导 AI 辅助部署，同时保留手动安装路径。支持 Skill 的客户端可安装随发行包提供的版本化 secretbridge-operations Skill；仅支持 MCP 的客户端仍可按工具协议接入。Skill 只提供操作指导，不增加代理权限。 / AI-assisted deployment is now the primary documentation path, with manual setup retained. Skill-capable clients may install the bundled versioned operations Skill; MCP-only clients remain supported. The Skill guides usage but grants no additional broker privileges.
• 仓库按前端、后端、测试、工具与文档职责重组，并核对公开 HTTP/MCP 契约。该重构是新安装系列，不承诺与早期预发布版本兼容。 / The repository is reorganized by frontend, backend, tests, tools and documentation responsibilities, with public HTTP/MCP contracts checked. It starts a new installation line rather than promising compatibility with older prereleases.

权限检查与持续集成 / Permission checks and CI

• Windows 本地访问控制检查先验证 ACL、ACE 与 SID，再读取权限结构；Code Scanning 告警 #14 和 #15 已标记为 fixed。静态分析告警本身不等于已确认可利用的漏洞。 / Windows local access checks validate ACL, ACE and SID structures before reading them. Code Scanning alerts #14 and #15 are marked fixed; a static-analysis finding is not, by itself, a confirmed exploitable vulnerability.
• PR 检查按变更范围保守选择；仅文档变更保留仓库内容和元数据检查，未知变更运行全量检查。发行标签仍执行完整跨平台打包与验收。 / PR checks are conservatively selected by changed paths. Documentation-only changes retain repository and metadata checks; unknown changes run the full suite. Release tags still run full cross-platform packaging and acceptance.

关联记录 / Traceability

范围 / Scope	合并的 PR / Merged PR	对应任务 / Related work
AI 操作 Skill / AI operations Skill	#138	Issue #132
结构重组、PIN 与恢复 / Architecture, PIN and recovery	#140	Issue #133
部署文档、CI 与扫描修复 / Deployment docs, CI and scanning fixes	#141	CodeQL 主分支复核 / Main-branch scan

完整代码差异 / Full code diff: v0.2.0-beta.9...v0.3.0-beta.2.

下载与验证 / Downloads and verification

平台 / Platform	发行包 / Archive	校验文件 / SHA-256 sidecar
Windows x86_64	ZIP	SHA-256
Ubuntu/Linux x86_64	tar.gz	SHA-256
macOS arm64	tar.gz	SHA-256

完整 SHA-256 / Full archive digests

• secretbridge-0.3.0-beta.2-windows-x86_64.zip: 9cd681d487cd8631da1fe2583deb8f4419bde077fc96439d8f824fcaeaa8549c
• secretbridge-0.3.0-beta.2-linux-x86_64.tar.gz: 05d3caf74d8a74fdb84ea3f5df74a4f25722d0ffe61885db0612ca18b220bfd1
• secretbridge-0.3.0-beta.2-macos-aarch64.tar.gz: 6d2937b311e5a3ac725e2dec2a67c2579999c3f216e1a25dca95dda9fb39e31a

下载后先核对同名 .sha256 文件，再解压并使用包内程序的 verify-package 命令检查清单与 CycloneDX SBOM。包内含对应源码及许可材料。 / Check the matching .sha256 file, then use the packaged verify-package command to validate the manifest and CycloneDX SBOM. The archive includes corresponding source and license materials.

验证边界与反馈 / Validation limits and feedback

三平台原生包与生命周期验收、浏览器兼容性、数据库连接器和主分支 CodeQL 自动检查已通过。它们不等同于真实桌面会话、原生凭据库、辅助技术或整机重启验证；这部分证据继续在社区验证 Issue #139收集。Windows 11 x64、Ubuntu 24.04 x86_64 与 macOS 14 arm64 是当前 Beta 的验证目标，并非已经确认的最低系统保证。
Automated native-package, browser, database and CodeQL checks passed. They do not replace real-desktop, native credential-store, accessibility or full-reboot testing; that evidence remains open in community issue #139. The listed OS versions are Beta validation targets, not verified minimum-platform guarantees.

反馈 / Feedback: 普通问题 / Issues · 私密安全报告 / Private security report. 公开反馈只使用测试数据，不上传 PIN、恢复密钥、真实凭据或私人环境信息。 / Use test data in public reports; never include a PIN, recovery key, live credential or private environment details.

SecretBridge 0.2.0-beta.9

SecretBridge 0.2.0-beta.9

公开 Beta · Public prerelease | 仅供个人本机评估；安装包未签名。升级前备份，先用测试凭据验证。
Individual, single-machine evaluation. Packages are unsigned. Back up before upgrading and begin with disposable test credentials.

版本概览 / Release at a glance

项目 / Item	内容 / Value
发布 / Published	2026-09-24 · v0.2.0-beta.9
源码 / Source	276b57b
变更范围 / Change range	v0.2.0-beta.9 与 beta.8 的差异 / Compare
配置 schema / Configuration schema	23
发行验证 / Package evidence	Native packages CI

概览 / Summary. 强化首次初始化、会话审批和加密诊断，完善任务工作台与脱敏历史，并在发布前清除 Code Scanning 的全部六条历史告警。
Strengthen initialization, conversation approvals and encrypted diagnostics; improve task review and sanitized history; clear all six historical Code Scanning alerts before release.

更新详情 / Detailed changes

身份与诊断 / Identity and diagnostics

• 首次初始化必须设置 12–64 字符 PIN；可选绑定 TOTP，但 PIN 始终保留。详细诊断记录和执行前命令配置持续加密保存，用户用同一 PIN 解锁预览并选择导出类别。 / First-run setup requires a 12–64 character PIN; optional TOTP keeps the PIN. Detailed diagnostic records and pre-execution command configurations stay encrypted, with PIN-unlocked selective export.
• 系统凭据库读取、写入、删除及 TOTP 绑定、停用均设 15 秒等待上限；超时后的迟到写入会清理，避免旧秘密意外恢复可用。 / Native credential reads, writes, deletes and TOTP changes have a 15-second request bound, with late-write cleanup.

审批与任务工作台 / Approvals and task workspace

• 按 AI 会话 ID 与摘要汇总任务，可选逐任务、同类任务或一小时会话级审批；会话级授权覆盖该会话所有后续操作，持续显示风险标识且可撤销。 / Group tasks by conversation ID and summary; choose per-task, identical-task or one-hour conversation-wide approval, with a persistent warning and revocation.
• 页内弹窗显示待审批总数，按时间顺序逐一呈现，处理后自动进入下一条并允许暂缓；浏览器通知与原生系统通知分别可选。任务模板、授权和执行入口改为侧边栏二级导航。 / The in-page queue shows the count, advances chronologically after each decision and allows defer; browser and native notifications are separate options. Task sections move into sidebar subnavigation.

执行、日志与 MCP / Execution, logs and MCP

• 一次性草案审批后正确退出可复用模板列表；结构化 SSH 申请显示远端目录，命令可承载最多 32 KiB 的已审查非秘密标准输入。秘密参数只接受明确占位符，MCP 提供输出 schema 与字段级恢复建议。 / One-time drafts leave reusable template lists; structured SSH shows the remote directory, commands accept up to 32 KiB of reviewed non-secret stdin, and MCP provides explicit secret placeholders, output schemas and field-level recovery hints.
• 最多保留 2048 个脱敏输出块及固定失败阶段；安全历史可按状态、目标和错误码筛选，并导出 JSON、JSONL 或 CSV。终端关闭或服务重启后仍可查看留存内容。 / Retain up to 2,048 sanitized output chunks and fixed failure stages; filter safe history and export JSON, JSONL or CSV, including after terminal closure or restart.
• 首次安装打开或明确交接本机管理页；命令申请不再探测用户指定路径，只做绝对路径、NUL 和父目录分量检查，批准后由启动结果判断是否存在。 / First install opens or hands off the local console; command drafts check path syntax without pre-approval filesystem probes.

验证与平台边界 / Validation and platform boundaries

• 验证同目录 4,000 次测试审批与运行、备份和资源趋势；固定 Ubuntu 24.04 与 macOS 14 包 runner，并让 Rust 与包验收在独立 runner 并行，保留三平台、浏览器和真实数据库门槛。 / Verify 4,000 synthetic approvals and runs with backup and resource trends; pin package runners and parallelize Rust and package gates without removing platform, browser or real-database checks.
• 收紧 Windows 命名管道 DACL 与 Unix IPC 所有者、权限和 socket 类型检查。 / Tighten Windows named-pipe DACLs and Unix IPC ownership, permissions and socket metadata.

关联记录 / Traceability

范围 / Scope	合并的 PR / Merged PRs	对应 Issue / Related issues
身份与诊断 / Identity and diagnostics	PR #118, PR #130, PR #131, PR #134	Issue #105, Issue #110, Issue #113
审批与任务工作台 / Approvals and tasks	PR #116, PR #117, PR #119	Issue #102, Issue #103, Issue #112
执行与 MCP / Execution and MCP	PR #120, PR #123, PR #124, PR #125	Issue #104, Issue #106, Issue #107
日志、部署与状态 / Logs and deployment	PR #122, PR #126, PR #127	Issue #108, Issue #109, Issue #111
平台与稳定性 / Platforms and stability	PR #121, PR #128, PR #129, PR #135	Issue #38, Issue #63, Issue #70, Issue #71
Code Scanning 修复 / Code Scanning fixes	PR #137	—

完整代码差异 / Full code diff: v0.2.0-beta.9 与 beta.8 的差异 / Compare.

安全记录 / Security records. 没有关联的公开 GHSA。本版发布前 CodeQL 历史告警 #1–#6 均显示 fixed；这些是静态分析记录，不等同于已确认可利用漏洞。告警详情链接可能需要维护者权限，公开变更与复核见 PR #127、PR #137 和 main CodeQL。
No public GHSA is associated with this release. Before publication, historical CodeQL alerts #1–#6 were marked fixed. Static-analysis findings are not themselves confirmed exploitable vulnerabilities; alert details may require maintainer access.

Code Scanning 告警 / Alert	规则 / Rule	状态 / State
#1	py/clear-text-storage-sensitive-data	fixed
#2	rust/path-injection	fixed
#3	rust/path-injection	fixed
#4	rust/cleartext-storage-database	fixed
#5	rust/sql-injection	fixed
#6	rust/hard-coded-cryptographic-value	fixed

升级与已知限制 / Upgrade and limitations

• 升级 / Upgrade: 配置 schema 升至 23；此 Beta 不承诺兼容旧版身份验证设置。升级前保存独立备份，旧版程序不能直接打开新数据库；回滚程序前需恢复相应旧备份。
  Configuration schema advances to 23. This Beta does not promise compatibility with older authentication settings. Keep an independent backup; older binaries cannot directly open the new database, so restore a matching old backup before binary rollback.
• 限制 / Limits: 目标为 Windows 11 x64、Ubuntu 24.04 x86_64 和 macOS 14 arm64；自动验收不等于各真实桌面环境的人工验证。开源包未签名，系统可能显示未知发布者。实机安装与卸载证据仍在 Issue #70 跟踪。
  Targets are Windows 11 x64, Ubuntu 24.04 x86_64 and macOS 14 arm64. Automated checks do not replace real-desktop validation. Open-source packages are unsigned. Real-machine install and uninstall evidence remains tracked in Issue #70.

下载与验证 / Downloads and verification

平台 / Platform	发行包 / Archive	校验文件 / SHA-256 sidecar
Windows x86_64	secretbridge-0.2.0-beta.9-windows-x86_64.zip	SHA-256
Ubuntu 24.04 x86_64	secretbridge-0.2.0-beta.9-linux-x86_64.tar.gz	SHA-256
macOS 14 arm64	secretbridge-0.2.0-beta.9-macos-aarch64.tar.gz	SHA-256

完整 SHA-256 / Full archive digests

• secretbridge-0.2.0-beta.9-windows-x86_64.zip: e774f0775430a6912f36b7a976ae6ecda84ddf8039bfbd74ef100fac14737f9a
• secretbridge-0.2.0-beta.9-linux-x86_64.tar.gz: 9f538c689b47b2d92aed547c9e22ce43ed929a6a6c73d6b968b7b94dc47aae84
• secretbridge-0.2.0-beta.9-macos-aarch64.tar.gz: 7be0dc310c9fecfee24de5c55c4feb6d1db88fe88b0e7...

SecretBridge 0.2.0-beta.8

SecretBridge 0.2.0-beta.8

公开 Beta · Public prerelease | 仅供个人本机评估；安装包未签名。升级前备份，先用测试凭据验证。
Individual, single-machine evaluation. Packages are unsigned. Back up before upgrading and begin with disposable test credentials.

版本概览 / Release at a glance

项目 / Item	内容 / Value
发布 / Published	2026-09-20 · v0.2.0-beta.8
源码 / Source	5524779
变更范围 / Change range	v0.2.0-beta.8 与 beta.6 的差异 / Compare
配置 schema / Configuration schema	19
发行验证 / Package evidence	Native packages CI

概览 / Summary. 此发行包同时包含未单独发布的 beta.7 功能：连接规划、一次性任务、受控连续终端与可选 PIN；本版再加入 TOTP 与一次性验证码审批。
This package also includes the unreleased beta.7 work: connection planning, one-time tasks, controlled continuous terminals and optional PIN; beta.8 adds TOTP and one-time-code approval.

更新详情 / Detailed changes

beta.7 累积功能 / Cumulative beta.7 work

• 连接和凭据增加可供 MCP 只读规划的非秘密地址与账号元数据；AI 可申请无需预存模板的一次性受控操作，人仍审批冻结内容。 / Connections gain non-secret planning metadata; AI may request a one-time controlled operation without a saved template while a human reviews its frozen contents.
• 普通命令与凭据命令可复用代理托管的连续终端；增加可选 PIN、持久可撤销浏览器会话，并为 Telnet 设置默认关闭的显式风险开关。 / Ordinary and credential commands can share a broker-owned terminal; optional PIN, revocable browser sessions and disabled-by-default Telnet opt-in are added.

TOTP 与审批 / TOTP and approval

• Web 控制台支持二维码或手动密钥绑定、替换和停用身份验证器；此版允许 TOTP 替代浏览器 PIN。 / The Web console supports QR and manual-key enrollment, replacement and disablement; in this historical version TOTP may replace the browser PIN.
• 用户可向 AI 提供一次性验证码，由 MCP 仅确认指定 ID 与版本的待审批请求；时间窗口有界，成功步长持久防重放，连续五次失败后冷却一分钟。 / A user-supplied code may confirm only the specified pending approval and version through MCP, with bounded timing, persisted replay prevention and a one-minute cooldown after five failures.
• TOTP 种子仅存系统凭据库；SQLite 与审计只保存模式、已接受步长和固定非秘密事件。 / The TOTP seed stays in the OS credential store; SQLite and audit keep only mode, accepted time step and fixed non-secret events.

关联记录 / Traceability

范围 / Scope	合并的 PR / Merged PRs	对应 Issue / Related issues
未单独发布的 beta.7 / Unreleased beta.7	PR #99	Issue #93, Issue #94, Issue #95, Issue #96, Issue #97, Issue #98
TOTP 与 MCP 审批 / TOTP and MCP approval	PR #101	Issue #100

完整代码差异 / Full code diff: v0.2.0-beta.8 与 beta.6 的差异 / Compare.

安全记录 / Security records. 本版没有关联的公开 GHSA；疑似漏洞请通过私密渠道报告。
No public GHSA is associated with this release. Report suspected vulnerabilities privately.

升级与已知限制 / Upgrade and limitations

• 升级 / Upgrade: 配置 schema 升至 19。此预发布版不承诺旧版身份验证设置的完整兼容；升级与回滚前保留独立备份。beta.9 后续改为首次初始化必须保留 PIN，本页描述的是 beta.8 的历史行为。
  Configuration schema advances to 19. Older authentication settings are not promised full compatibility; keep an independent backup before upgrade or rollback. beta.9 later requires a persistent PIN; this page describes beta.8 behavior.
• 限制 / Limits: 未签名包可能触发系统提示。验证码只确认一个待审批请求，不建立长期授权；AI 仍不得操作人工审批页面或获取绑定密钥。
  Unsigned packages may trigger system prompts. A code confirms one pending approval, not standing authorization; AI must not operate the human approval page or receive enrollment secrets.

下载与验证 / Downloads and verification

平台 / Platform	发行包 / Archive	校验文件 / SHA-256 sidecar
Windows x86_64	secretbridge-0.2.0-beta.8-windows-x86_64.zip	SHA-256
Ubuntu 24.04 x86_64	secretbridge-0.2.0-beta.8-linux-x86_64.tar.gz	SHA-256
macOS 14 arm64	secretbridge-0.2.0-beta.8-macos-aarch64.tar.gz	SHA-256

完整 SHA-256 / Full archive digests

• secretbridge-0.2.0-beta.8-windows-x86_64.zip: fe3d40167f5278d8542fda8ddefc519b8d3c23a569c496f05295ef9f98a72b9a
• secretbridge-0.2.0-beta.8-linux-x86_64.tar.gz: 2472be53be277148fe04bab25ca55d7c5c7475ed92e67703d119dc3c2f3ffd68
• secretbridge-0.2.0-beta.8-macos-aarch64.tar.gz: aad6204a3309fbb6a38924339a643b6a703db49adeed5c52fa955e01e1e4f976

核对下载包与同名摘要后，解压并执行包内程序的 verify-package 检查清单和 CycloneDX SBOM，再安装。包内另含对应源码、AGPL 正文与第三方许可材料。
Verify the archive against its sidecar, then run the packaged verify-package command before installation. The package also includes corresponding source and license materials.

验证证据 / Evidence: 三平台原生包与生命周期 · 源码与安装说明. 自动化结果不替代真实桌面、原生凭据库或整机重启验证。
Automated results do not replace real-desktop, native credential-store or full-reboot evidence.

反馈 / Feedback: 普通问题 / Issues · 私密安全报告 / Private security report. 公开报告请只使用测试数据。
Use test data only in public reports.

SecretBridge 0.2.0-beta.6

SecretBridge 0.2.0-beta.6

公开 Beta · Public prerelease | 仅供个人本机评估；安装包未签名。升级前备份，先用测试凭据验证。
Individual, single-machine evaluation. Packages are unsigned. Back up before upgrading and begin with disposable test credentials.

版本概览 / Release at a glance

项目 / Item	内容 / Value
发布 / Published	2026-09-20 · v0.2.0-beta.6
源码 / Source	e8cba81
变更范围 / Change range	v0.2.0-beta.6 与 beta.5 的差异 / Compare
配置 schema / Configuration schema	16
发行验证 / Package evidence	Native packages CI

概览 / Summary. 补齐从已安装代理到 AI 客户端 MCP 可用的部署闭环，并稳定 Windows 命令集成测试。
Complete the path from an existing broker installation to a verified MCP client connection, and stabilize Windows command integration checks.

更新详情 / Detailed changes

安装复用 / Installation reuse

• 部署助手先检查现有 MCP 配置、程序路径和安装记录；健康安装直接复用，避免为新的 AI 客户端或对话重复部署。 / Deployment checks existing MCP settings, binary paths and installation records first, reusing a healthy broker across AI clients and conversations.
• 状态、重复安装和回滚结果返回当前活动程序的绝对路径，供客户端配置使用。 / Status, repeat installation and rollback return the active binary path for client configuration.

MCP 接入与验证 / MCP onboarding

• 说明配置备份、客户端重载与只读 secretbridge_terminal_capabilities 检查；未知配置只提供可复制片段，不猜测或覆写。 / Document configuration review, client reload and a read-only capability check; unknown client settings receive a paste-ready snippet.
• 成功型 PowerShell 夹具放宽启动观察窗口，专门的一秒超时断言保持不变。 / Expected-success PowerShell fixtures allow loaded-runner startup time while the dedicated one-second timeout assertion remains.

关联记录 / Traceability

范围 / Scope	合并的 PR / Merged PRs	对应 Issue / Related issues
部署与 MCP / Deployment and MCP	PR #92	Issue #91
Windows 验收 / Windows acceptance	PR #90	Issue #44

完整代码差异 / Full code diff: v0.2.0-beta.6 与 beta.5 的差异 / Compare.

安全记录 / Security records. 本版没有关联的公开 GHSA；疑似漏洞请通过私密渠道报告。
No public GHSA is associated with this release. Report suspected vulnerabilities privately.

升级与已知限制 / Upgrade and limitations

• 升级 / Upgrade: 可从 beta.5 升级，配置 schema 保持 16。先核对原安装，再使用本版包；MCP 命令应指向安装结果返回的活动程序。
  Upgrade from beta.5 without a schema change (still 16). Inspect the existing installation before replacing it, and point the MCP command at the active binary returned by the installer.
• 限制 / Limits: 此版仍由人通过 Web 审批；MCP 不提供凭据读取或自行审批能力。更广泛的真实桌面和辅助技术验证仍需社区证据。
  Human Web approval remains required; MCP cannot read credentials or approve its own requests. Broader real-desktop and assistive-technology evidence is still needed.

下载与验证 / Downloads and verification

平台 / Platform	发行包 / Archive	校验文件 / SHA-256 sidecar
Windows x86_64	secretbridge-0.2.0-beta.6-windows-x86_64.zip	SHA-256
Ubuntu 24.04 x86_64	secretbridge-0.2.0-beta.6-linux-x86_64.tar.gz	SHA-256
macOS 14 arm64	secretbridge-0.2.0-beta.6-macos-aarch64.tar.gz	SHA-256

完整 SHA-256 / Full archive digests

• secretbridge-0.2.0-beta.6-windows-x86_64.zip: 274121b00ee4b430dd87299c518e17eac55d5fe83629d29bc04ce36e2137b064
• secretbridge-0.2.0-beta.6-linux-x86_64.tar.gz: b92a81d20273b26d6a218fddf2ad60b58a4f7470723348dfb63e083df90cc0d9
• secretbridge-0.2.0-beta.6-macos-aarch64.tar.gz: b59dd82c9f70dbc34ed6e84efb13f7b6f3b4e809e03b97d607b528d98435f891

核对下载包与同名摘要后，解压并执行包内程序的 verify-package 检查清单和 CycloneDX SBOM，再安装。包内另含对应源码、AGPL 正文与第三方许可材料。
Verify the archive against its sidecar, then run the packaged verify-package command before installation. The package also includes corresponding source and license materials.

验证证据 / Evidence: 三平台原生包与生命周期 · 源码与安装说明. 自动化结果不替代真实桌面、原生凭据库或整机重启验证。
Automated results do not replace real-desktop, native credential-store or full-reboot evidence.

反馈 / Feedback: 普通问题 / Issues · 私密安全报告 / Private security report. 公开报告请只使用测试数据。
Use test data only in public reports.

SecretBridge 0.2.0-beta.5

SecretBridge 0.2.0-beta.5

公开 Beta · Public prerelease | 仅供个人本机评估；安装包未签名。升级前备份，先用测试凭据验证。
Individual, single-machine evaluation. Packages are unsigned. Back up before upgrading and begin with disposable test credentials.

版本概览 / Release at a glance

项目 / Item	内容 / Value
发布 / Published	2026-09-20 · v0.2.0-beta.5
源码 / Source	b0b3cc5
变更范围 / Change range	该标签变更记录 / Changelog at tag
配置 schema / Configuration schema	16
发行验证 / Package evidence	Native packages CI

概览 / Summary. 首个公开 Beta：交付本机凭据代理、人工审批、受控连接器与可校验的三平台原生包，并建立双语首次使用及反馈流程。
First public Beta: local credential broker, human approval, controlled connectors, verifiable native packages, and bilingual first-run consent and feedback.

更新详情 / Detailed changes

核心执行 / Controlled execution

• 凭据仅由本机代理内部调用；命令、HTTP、SSH、SFTP、Git HTTPS、PostgreSQL 与 MySQL 任务采用固定目标、冻结参数、人工审批、取消和受限结果。 / Credentials remain inside the local broker; controlled connectors use fixed targets, frozen parameters, human approval, cancellation and bounded results.
• 连续终端支持重连与游标回放；凭据输出在解码、保存或返回前脱敏。 / Continuous terminals support reconnect and cursor replay; credential-bearing output is filtered before decoding, persistence or return.

安装与数据 / Delivery and data

• 交付后台启动、状态、安装、升级、回滚、卸载，以及非秘密配置导入导出、SQLite 备份恢复。 / Deliver background lifecycle commands, upgrade and rollback, non-secret configuration transfer, and SQLite backup and restore.
• 原生包包含源码快照、许可材料、清单与 CycloneDX SBOM；安装前校验版本、schema 和文件摘要。 / Native packages carry corresponding source, licenses, a manifest and CycloneDX SBOM; installation validates versions, schema and file digests.

首次使用与质量 / First run and quality

• 新增中英许可协议与免责协议、版本化本地同意、语言偏好、普通缺陷和私密安全报告入口。 / Add bilingual terms and disclaimer, versioned local consent, language preference, and separate bug and private security-report routes.
• 收紧凭据库与 SQLite 状态一致性、历史容量和失败恢复；建立依赖漏洞、浏览器、真实数据库及三平台包验收。 / Tighten credential-store and SQLite consistency, history capacity and recovery; establish dependency, browser, database and package gates.

关联记录 / Traceability

范围 / Scope	合并的 PR / Merged PRs	对应 Issue / Related issues
核心执行 / Execution	PR #26, PR #27, PR #28, PR #29, PR #30, PR #31	—
生命周期与发行 / Delivery	PR #33, PR #34, PR #35, PR #46	Issue #39, Issue #58
质量整改 / Reliability	PR #76	Issue #50, Issue #51, Issue #52, Issue #53, Issue #54, Issue #62
验收与首次使用 / Validation and onboarding	PR #45, PR #48, PR #49, PR #89	Issue #37, Issue #40, Issue #41

完整代码差异 / Full code diff: 该标签变更记录 / Changelog at tag.

安全记录 / Security records. 本版没有关联的公开 GHSA；疑似漏洞请通过私密渠道报告。
No public GHSA is associated with this release. Report suspected vulnerabilities privately.

升级与已知限制 / Upgrade and limitations

• 升级 / Upgrade: 这是首个公开 Beta，配置 schema 为 16；不迁移此前未发布的开发数据库或安装包。安装前先备份并核对下载包。
  This is the first public Beta, with configuration schema 16. Earlier unpublished development databases and packages are not migrated. Back up data and verify the archive before installation.
• 限制 / Limits: 未签名原生包可能触发未知发布者提示。普通终端不是凭据沙箱；不提供任意 SQL、任意远程脚本、Git SSH、递归 SFTP 或凭据导出。
  Unsigned packages may trigger an unknown-publisher warning. Ordinary terminals are not credential sandboxes. Arbitrary SQL or remote scripts, Git SSH, recursive SFTP and credential export are outside this release.

下载与验证 / Downloads and verification

平台 / Platform	发行包 / Archive	校验文件 / SHA-256 sidecar
Windows x86_64	secretbridge-0.2.0-beta.5-windows-x86_64.zip	SHA-256
Ubuntu 24.04 x86_64	secretbridge-0.2.0-beta.5-linux-x86_64.tar.gz	SHA-256
macOS 14 arm64	secretbridge-0.2.0-beta.5-macos-aarch64.tar.gz	SHA-256

完整 SHA-256 / Full archive digests

• secretbridge-0.2.0-beta.5-windows-x86_64.zip: 78e01d8bc561eca021c7e6f71f82cb55f6c3e66e5e4832f38c6f2409e7b7bb14
• secretbridge-0.2.0-beta.5-linux-x86_64.tar.gz: df3223e2c8b32887d02a2239cc04f90c68dbd5c62e641cd805bd90b6eb3e1f78
• secretbridge-0.2.0-beta.5-macos-aarch64.tar.gz: 829e64e658251574596a4a40743f6723b0dd69f14042836799540c2afc9dfec7

核对下载包与同名摘要后，解压并执行包内程序的 verify-package 检查清单和 CycloneDX SBOM，再安装。包内另含对应源码、AGPL 正文与第三方许可材料。
Verify the archive against its sidecar, then run the packaged verify-package command before installation. The package also includes corresponding source and license materials.

验证证据 / Evidence: 三平台原生包与生命周期 · 源码与安装说明. 自动化结果不替代真实桌面、原生凭据库或整机重启验证。
Automated results do not replace real-desktop, native credential-store or full-reboot evidence.

反馈 / Feedback: 普通问题 / Issues · 私密安全报告 / Private security report. 公开报告请只使用测试数据。
Use test data only in public reports.